In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference During XSK TX queue… (CVE-2026-98791)

The vulnerability in the Linux kernel's net/mlx5e driver involves a null pointer dereference during the teardown of the AF_XDP TX queue. Specifically, when outstanding descriptors are completed without a CQE, and a TX timestamp was requested, the completion path passes a null CQE pointer to mlx5e_xsk_fill_timestamp(), which dereferences it, leading to a null pointer dereference. The patch modifies the code to return zero when no CQE is available, indicating no TX timestamp was produced during teardown and preventing the null dereference.

This vulnerability can cause a null pointer dereference in the kernel, potentially leading to a kernel crash or denial of service. There is no indication of code execution or privilege escalation from the provided data. No known exploits are reported in the wild.

A fix has been implemented in the Linux kernel to address this issue. Users should apply the official kernel updates that include this patch to remediate the vulnerability. No additional mitigation steps are indicated.